Description
GV-E-Map
Server V18.2.0A contains a plaintext database password embedded within an
application component. The credential can be recovered through static analysis
of the distributed binary and may also be exposed in process memory during
runtime.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GeoVision | GV-E-map Server | 18.2.0A | 18.4 |
References
- https://www.geovision.com.tw/cyber_security.php vendor-advisory